Secure multi-factor user authentication on disconnected mobile devices

Abstract

Embodiments described herein disclose a mobile device system for providing access to a subset of data within an application executed by the mobile device. During a first time period, when the mobile device is connected to a network, authentication information corresponding to a user account with a payment services provider is received. A biometric authentication signature and password are received in response to a request to enable access to a subset of data associated with the account. The subset of data is encrypted with a key generated from the biometric signature and password and stored. At a second time period, when the mobile device is disconnected from a network, the subset of data is decrypted using a key generated from an entered biometric signature and password.

What is claimed is: 
     
       1. A mobile device, comprising:
 a non-transitory memory; 
 one or more biometric sensors, wherein the biometric sensors include one or more of a fingerprint reader, an audio capture device, or a camera; 
 a network interface; 
 a touch-sensitive display device; and 
 one or more hardware processors coupled to the non-transitory memory, the one or more biometric sensors, and the touch-sensitive display, wherein the one or more hardware processors are configured to read instructions from the non-transitory memory to cause the mobile device to perform operations comprising: 
 during a first time period in which the network interface is connected to a network:
 receiving, using the touch-sensitive display device, authentication information corresponding to an account with a payment services provider; 
 receiving itemized transactional history data associated with the account with the payment services provider; 
 receiving, using the touch-sensitive display device, a user request to enable an offline viewing access to the itemized transactional history data associated with the account with the payment services provider; 
 receiving, using the one or more biometric sensors and the touch-sensitive display device, a biometric authentication signature and a password corresponding to the itemized transactional history data, wherein the biometric authentication signature is one or more of a fingerprint, an audible passphrase, or a face scan; 
 generating, by the one or more hardware processors, a cryptographic authentication key based on the biometric authentication signature and the password; 
 encrypting, by the one or more hardware processors, the itemized transactional history data using the cryptographic authentication key to create an encrypted itemized transactional history data; and 
 storing the encrypted itemized transactional history data on the mobile device; and 
 
 during a second time period in which the network interface is disconnected from the network:
 receiving, by the one or more hardware processors, a user request to view the encrypted itemized transactional history data offline; 
 receiving, using the one or more biometric sensors and the touch-sensitive display device, the biometric authentication signature and the password; 
 generating, by the one or more hardware processors, a cryptographic decryption key based on the biometric authentication signature and the password; 
 decrypting, by the one or more hardware processors, the encrypted itemized transactional history data using the cryptographic decryption key; and 
 displaying, on the touch-sensitive display device, the decrypted itemized transactional history data. 
 
 
     
     
       2. The mobile device of  claim 1 , wherein the password is a first password, and wherein the authentication information comprises a username and a second password. 
     
     
       3. The mobile device of  claim 2 , wherein the first password is a first number of characters, and wherein the second password is a second number of characters, and wherein the second number is greater than the first number. 
     
     
       4. The mobile device of  claim 1 , wherein the camera comprises a retina scanner, and wherein the face scan comprises a retinal scan. 
     
     
       5. The mobile device of  claim 1 , wherein the operations further comprise:
 during the first time period in which the network interface is connected to the network:
 receiving, using the touch-sensitive display device, a selection of one or more data elements or data categories; and 
 creating, by the one or more hardware processors, the itemized transactional history data based on the selection. 
 
 
     
     
       6. The mobile device of  claim 1 , wherein the operations further comprise:
 during the first time period in which the network interface is connected to the network:
 receiving, using the touch-sensitive display device, a request to authorize a payment token corresponding to the account with the payment services provider for an offline utilization; and 
 encrypting an authorized payment token using the cryptographic authentication key to create an encrypted authorized payment token; and 
 
 during the second time period in which the network interface is disconnected from the network:
 receiving, using the touch-sensitive display device, a request to utilize the encrypted authorized payment token; 
 decrypting the encrypted authorized payment token using the cryptographic decryption key; and 
 enabling the offline utilization of the authorized payment token. 
 
 
     
     
       7. The mobile device of  claim 1 , wherein the request to enable the offline viewing access to the itemized transactional history data is limited to transaction history associated with the account with the payment services provider over a past week. 
     
     
       8. A computer-implemented method for providing access to transactional history data, comprising:
 during a first time period, wherein a network interface of a mobile device is connected to a network during the first time period:
 receiving, using a touch-sensitive display device of the mobile device, authentication information corresponding to an account with a payment services provider; 
 receiving the transactional history data associated with the account with the payment services provider; 
 receiving, using the touch-sensitive display device, a user request to enable an offline viewing access to the transactional history data associated with the account with the payment services provider; 
 receiving, using one or more biometric sensors of the mobile device and the touch-sensitive display device, a biometric authentication signature and a password corresponding to the transactional history data, wherein the biometric sensors comprise one or more of a fingerprint reader, an audio capture device, or camera, and wherein the biometric authentication signature comprises one or more of a fingerprint, an audible passphrase, or a face scan; 
 generating, by the mobile device, a cryptographic authentication key based on the biometric authentication signature and the password; 
 encrypting, by the mobile device, the transactional history data using the cryptographic authentication key to create an encrypted transactional history data; and 
 storing, by the mobile device, the encrypted transactional history data on the mobile device; and 
 
 during a second time period, wherein the network interface is disconnected from the network during the second time period:
 receiving, using the touch-sensitive display device, a user request to view the transactional history data offline; 
 receiving, using one or more biometric sensors of the mobile device and the touch-sensitive display device, the biometric authentication signature and the password; 
 generating, by the mobile device, a cryptographic decryption key based on the biometric authentication signature and the password; 
 decrypting, by the mobile device, the encrypted transactional history data using the cryptographic decryption key; and 
 displaying, on the touch-sensitive display device, the transactional history data. 
 
 
     
     
       9. The method of  claim 8 , wherein the password is a first password, and wherein the authentication information comprises a username and a second password. 
     
     
       10. The method of  claim 9 , wherein the first password is a first number of characters, and wherein the second password is a second number of characters, and wherein the second number is greater than the first number. 
     
     
       11. The method of  claim 8 , wherein the camera comprises a retina scanner, and wherein the face scan comprises a retinal scan. 
     
     
       12. The method of  claim 8 , further comprising:
 during the first time period:
 receiving, using the touch-sensitive display device, a selection of one or more data elements or data categories; and 
 creating, by the mobile device, the transactional history data based on the selection. 
 
 
     
     
       13. The method of  claim 8 , further comprising:
 during the first time period:
 receiving, using the touch-sensitive display device, a request to authorize a payment token corresponding to the account with the payment services provider for an offline utilization; and 
 encrypting, by the mobile device, an authorized payment token using the cryptographic authentication key to create an encrypted authorized payment token; and 
 
 during the second time period:
 receiving, using the touch-sensitive display device, a request to utilize the payment token offline; 
 decrypting, by the mobile device, the encrypted authorized payment token using the cryptographic decryption key; and 
 enabling, by the mobile device, the offline utilization of the authorized payment token. 
 
 
     
     
       14. The method of  claim 8 , wherein the transactional history data is limited to a number of previous transactions in a transaction history associated with the account with the payment services provider. 
     
     
       15. A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a mobile device to perform operations comprising:
 during a time period in which the mobile device is connected to a network:
 receiving, using a touch-sensitive display device of the mobile device, authentication information corresponding to an account with a payment services provider; 
 receiving historic transactional data associated with the account with the payment services provider; 
 receiving, using the touch-sensitive display device, a user request to enable an offline viewing access to the historic transactional data associated with the account with the payment services provider; 
 receiving, using one or more biometric sensors of the mobile device and the touch-sensitive display device, a biometric authentication signature and a password corresponding to the historic transactional data, wherein the biometric sensors comprise one or more of a fingerprint reader, an audio capture device, or camera, and wherein the biometric authentication signature comprises one or more of a fingerprint, an audible passphrase, or a face scan; 
 generating a cryptographic authentication key based on the biometric authentication signature and the password; 
 encrypting the historic transactional data using the cryptographic authentication key to create an encrypted historic transactional data; and 
 storing the encrypted historic transactional data on the mobile device; and 
 
 during a time period in which the mobile device is not connected to the network:
 receiving an offline request to view the encrypted historic transactional data offline; 
 receiving, using the one or more biometric sensors of the mobile device and the touch-sensitive display device of the mobile device, the biometric authentication signature and the password; 
 generating a cryptographic decryption key based on the biometric authentication signature and the password; 
 decrypting the encrypted historic transactional data using the cryptographic decryption key; and 
 displaying, on the touch-sensitive display device, the decrypted historic transactional data. 
 
 
     
     
       16. The non-transitory machine-readable medium of  claim 15 , wherein the camera comprises a retina scanner, and wherein the face scan comprises a retinal scan. 
     
     
       17. The non-transitory machine-readable medium of  claim 15 , wherein the password is a first password, and wherein the authentication information comprises a username and a second password. 
     
     
       18. The non-transitory machine-readable medium of  claim 15 , wherein the operations further comprise:
 during the time period in which the mobile device is connected to the network:
 receiving, using the touch-sensitive display device, a selection of one or more data elements or data categories; and 
 creating the historic transactional data based on the selection. 
 
 
     
     
       19. The non-transitory machine-readable medium of  claim 15 , wherein the operations further comprise:
 during the time period in which the mobile device is connected to the network:
 receiving, using the touch-sensitive display device, a request to authorize a payment token corresponding to the account with the payment services provider, wherein authorization of the payment token allows for a utilization of the payment token during the time period in which the mobile device is not connected to the network; 
 encrypting an authorized payment token using the cryptographic authentication key to create an encrypted authorized payment token; 
 
 during the time period in which a mobile device is not connected to the network:
 receiving, using the touch-sensitive display device, a request to utilize the payment token; 
 decrypting the encrypted authorized payment token using the cryptographic decryption key; and 
 enabling a use of the authorized payment token. 
 
 
     
     
       20. The non-transitory machine-readable medium of  claim 18 , wherein the selection identifies a type of a transaction over a transaction history time period, and wherein the historic transactional data comprises a set of previous transactions corresponding to the type of transaction over the transaction history time period.